comparing 89a88f1118024c96a8e44264023bfdf6c7288992 and main on soopy.moe/gensokyo

.gitignore

+47 -57

flake.lock

···

       75
       75
        
           "flake-compat": {

     

       76
       76
        
             "flake": false,

     

       77
       77
        
             "locked": {

     

       78
       78
       -
               "lastModified": 1747046372,

     

       79
       79
       -
               "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",

     

       78
       78
       +
               "lastModified": 1761588595,

     

       79
       79
       +
               "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",

     

       80
       80
        
               "owner": "edolstra",

     

       81
       81
        
               "repo": "flake-compat",

     

       82
       82
       -
               "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",

     

       82
       82
       +
               "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",

     

       83
       83
        
               "type": "github"

     

       84
       84
        
             },

     

       85
       85
        
             "original": {

     
···

       243
       243
        
               "zon2nix": "zon2nix"

     

       244
       244
        
             },

     

       245
       245
        
             "locked": {

     

       246
       246
       -
               "lastModified": 1764953050,

     

       247
       247
       -
               "narHash": "sha256-TkMjYCGm6FHflVQadN6mx1+3lWzY4wl+3U40lfvTroQ=",

     

       246
       246
       +
               "lastModified": 1765577799,

     

       247
       247
       +
               "narHash": "sha256-u7p0NFD83XrA5UZmtUVW7WQpdCsVYa7Flo430cVStd8=",

     

       248
       248
        
               "owner": "ghostty-org",

     

       249
       249
        
               "repo": "ghostty",

     

       250
       250
       -
               "rev": "08c9661683edc1e9e63d8e6abd469a68faaee575",

     

       250
       250
       +
               "rev": "7a1ff7779b6b4106ecc9349efb4e1f6afdb1ba4e",

     

       251
       251
        
               "type": "github"

     

       252
       252
        
             },

     

       253
       253
        
             "original": {

     
···

       323
       323
        
               ]

     

       324
       324
        
             },

     

       325
       325
        
             "locked": {

     

       326
       326
       -
               "lastModified": 1764866045,

     

       327
       327
       -
               "narHash": "sha256-0GsEtXV9OquDQ1VclQfP16cU5VZh7NEVIOjSH4UaJuM=",

     

       326
       326
       +
               "lastModified": 1765605144,

     

       327
       327
       +
               "narHash": "sha256-RM2xs+1HdHxesjOelxoA3eSvXShC8pmBvtyTke4Ango=",

     

       328
       328
        
               "owner": "nix-community",

     

       329
       329
        
               "repo": "home-manager",

     

       330
       330
       -
               "rev": "f63d0fe9d81d36e5fc95497217a72e02b8b7bcab",

     

       330
       330
       +
               "rev": "90b62096f099b73043a747348c11dbfcfbdea949",

     

       331
       331
        
               "type": "github"

     

       332
       332
        
             },

     

       333
       333
        
             "original": {

     
···

       365
       365
        
             "inputs": {

     

       366
       366
        
               "nix": "nix",

     

       367
       367
        
               "nix-eval-jobs": "nix-eval-jobs",

     

       368
       368
       -
               "nixpkgs": "nixpkgs_4"

     

       368
       368
       +
               "nixpkgs": "nixpkgs_3"

     

       369
       369
        
             },

     

       370
       370
        
             "locked": {

     

       371
       371
        
               "lastModified": 1764105837,

     
···

       387
       387
        
               "lastModified": 1731402384,

     

       388
       388
        
               "narHash": "sha256-OwUmrPfEehLDz0fl2ChYLK8FQM2p0G1+EMrGsYEq+6g=",

     

       389
       389
        
               "type": "tarball",

     

       390
       390
       -
               "url": "https://github.com/IBM/plex/releases/download/@ibm/plex-mono@1.1.0/ibm-plex-mono.zip"

     

       390
       390
       +
               "url": "https://github.com/IBM/plex/releases/download/@ibm%2Fplex-mono@1.1.0/ibm-plex-mono.zip"

     

       391
       391
        
             },

     

       392
       392
        
             "original": {

     

       393
       393
        
               "type": "tarball",

     

       394
       394
       -
               "url": "https://github.com/IBM/plex/releases/download/@ibm/plex-mono@1.1.0/ibm-plex-mono.zip"

     

       394
       394
       +
               "url": "https://github.com/IBM/plex/releases/download/@ibm%2Fplex-mono@1.1.0/ibm-plex-mono.zip"

     

       395
       395
        
             }

     

       396
       396
        
           },

     

       397
       397
        
           "indigo": {

     
···

       490
       490
        
             "inputs": {

     

       491
       491
        
               "flake-compat": "flake-compat_3",

     

       492
       492
        
               "nix-update-soopy": "nix-update-soopy",

     

       493
       493
       -
               "nixpkgs": "nixpkgs_5",

     

       493
       493
       +
               "nixpkgs": "nixpkgs_4",

     

       494
       494
        
               "treefmt-nix": "treefmt-nix_2"

     

       495
       495
        
             },

     

       496
       496
        
             "locked": {

     

       497
       497
       -
               "lastModified": 1764144136,

     

       498
       498
       -
               "narHash": "sha256-EqViuxH+g4lo5GlcQ5UjkIIdIF3tjF3K9gdmyXWt9gQ=",

     

       497
       497
       +
               "lastModified": 1765558006,

     

       498
       498
       +
               "narHash": "sha256-8o8J6YJgx7ZLZJfXlKL/upDyGuRFoTOTKeaLT4ZgUHw=",

     

       499
       499
        
               "owner": "soopyc",

     

       500
       500
        
               "repo": "mystia",

     

       501
       501
       -
               "rev": "ecf8e23ef3d0f4687043154a51056b1c5cba144e",

     

       501
       501
       +
               "rev": "5b177c1b32e2f671c1b4b92f0d71ec2a6a55fa9a",

     

       502
       502
        
               "type": "github"

     

       503
       503
        
             },

     

       504
       504
        
             "original": {

     
···

       548
       548
        
               ]

     

       549
       549
        
             },

     

       550
       550
        
             "locked": {

     

       551
       551
       -
               "lastModified": 1765080594,

     

       552
       552
       -
               "narHash": "sha256-5t3d655GqLblE+p5xN5ntkeRfZBesN7vehOWcRcU88M=",

     

       551
       551
       +
               "lastModified": 1765267181,

     

       552
       552
       +
               "narHash": "sha256-d3NBA9zEtBu2JFMnTBqWj7Tmi7R5OikoU2ycrdhQEws=",

     

       553
       553
        
               "owner": "nix-community",

     

       554
       554
        
               "repo": "nix-index-database",

     

       555
       555
       -
               "rev": "4194c582d0a3f440382ee00b729ea5cc5ef59754",

     

       555
       555
       +
               "rev": "82befcf7dc77c909b0f2a09f5da910ec95c5b78f",

     

       556
       556
        
               "type": "github"

     

       557
       557
        
             },

     

       558
       558
        
             "original": {

     
···

       586
       586
        
           },

     

       587
       587
        
           "nixos-hardware": {

     

       588
       588
        
             "locked": {

     

       589
       589
       -
               "lastModified": 1764729408,

     

       590
       590
       -
               "narHash": "sha256-BnwVvpidFX9hPwRkHuHw2y5ZgJWNeoHKd2fj2qls9NM=",

     

       589
       589
       +
               "lastModified": 1765610993,

     

       590
       590
       +
               "narHash": "sha256-pnnhKVObp3L6dWR9vsLAo7s1HliNW5x4CDyph+v7x3w=",

     

       591
       591
        
               "owner": "soopyc",

     

       592
       592
        
               "repo": "nixos-hardware",

     

       593
       593
       -
               "rev": "c45404cdfb6c4eb9d99f88e383c703db6e5db442",

     

       593
       593
       +
               "rev": "c880f92af869077edeed4bd8649a2de86fddd5d7",

     

       594
       594
        
               "type": "github"

     

       595
       595
        
             },

     

       596
       596
        
             "original": {

     
···

       618
       618
        
           },

     

       619
       619
        
           "nixpkgs_2": {

     

       620
       620
        
             "locked": {

     

       621
       621
       -
               "lastModified": 315532800,

     

       622
       622
       -
               "narHash": "sha256-sV6pJNzFkiPc6j9Bi9JuHBnWdVhtKB/mHgVmMPvDFlk=",

     

       623
       623
       -
               "rev": "82c2e0d6dde50b17ae366d2aa36f224dc19af469",

     

       621
       621
       +
               "lastModified": 1763191728,

     

       622
       622
       +
               "narHash": "sha256-gI9PpaoX4/f28HkjcTbFVpFhtOxSDtOEdFaHZrdETe0=",

     

       623
       623
       +
               "rev": "1d4c88323ac36805d09657d13a5273aea1b34f0c",

     

       624
       624
        
               "type": "tarball",

     

       625
       625
       -
               "url": "https://releases.nixos.org/nixpkgs/nixpkgs-25.11pre877938.82c2e0d6dde5/nixexprs.tar.xz"

     

       625
       625
       +
               "url": "https://releases.nixos.org/nixpkgs/nixpkgs-25.11pre896415.1d4c88323ac3/nixexprs.tar.xz"

     

       626
       626
        
             },

     

       627
       627
        
             "original": {

     

       628
       628
        
               "type": "tarball",

     
···

       631
       631
        
           },

     

       632
       632
        
           "nixpkgs_3": {

     

       633
       633
        
             "locked": {

     

       634
       634
       -
               "lastModified": 1758360447,

     

       635
       635
       -
               "narHash": "sha256-XDY3A83bclygHDtesRoaRTafUd80Q30D/Daf9KSG6bs=",

     

       636
       636
       -
               "rev": "8eaee110344796db060382e15d3af0a9fc396e0e",

     

       637
       637
       -
               "type": "tarball",

     

       638
       638
       -
               "url": "https://releases.nixos.org/nixos/unstable/nixos-25.11pre864002.8eaee1103447/nixexprs.tar.xz"

     

       639
       639
       -
             },

     

       640
       640
       -
             "original": {

     

       641
       641
       -
               "type": "tarball",

     

       642
       642
       -
               "url": "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz"

     

       643
       643
       -
             }

     

       644
       644
       -
           },

     

       645
       645
       -
           "nixpkgs_4": {

     

       646
       646
       -
             "locked": {

     

       647
       634
        
               "lastModified": 1764020296,

     

       648
       635
        
               "narHash": "sha256-6zddwDs2n+n01l+1TG6PlyokDdXzu/oBmEejcH5L5+A=",

     

       649
       636
        
               "owner": "NixOS",

     
···

       658
       645
        
               "type": "github"

     

       659
       646
        
             }

     

       660
       647
        
           },

     

       661
       661
       -
           "nixpkgs_5": {

     

       648
       648
       +
           "nixpkgs_4": {

     

       662
       649
        
             "locked": {

     

       663
       650
        
               "lastModified": 1763966396,

     

       664
       651
        
               "narHash": "sha256-6eeL1YPcY1MV3DDStIDIdy/zZCDKgHdkCmsrLJFiZf0=",

     
···

       673
       660
        
               "type": "indirect"

     

       674
       661
        
             }

     

       675
       662
        
           },

     

       676
       676
       -
           "nixpkgs_6": {

     

       663
       663
       +
           "nixpkgs_5": {

     

       677
       664
        
             "locked": {

     

       678
       678
       -
               "lastModified": 1764983851,

     

       679
       679
       -
               "narHash": "sha256-pyyfJp6Q80D0YhEuuP/qzasUZjoK3C3PrCp8BPWcDZE=",

     

       680
       680
       -
               "rev": "d9bc5c7dceb30d8d6fafa10aeb6aa8a48c218454",

     

       665
       665
       +
               "lastModified": 1765311797,

     

       666
       666
       +
               "narHash": "sha256-3bKCEc1JWOn8aj48H1yHKU6WDw0eSU2t7cKCL3FC+Lo=",

     

       667
       667
       +
               "rev": "09eb77e94fa25202af8f3e81ddc7353d9970ac1b",

     

       681
       668
        
               "type": "tarball",

     

       682
       682
       -
               "url": "https://releases.nixos.org/nixos/25.11/nixos-25.11.1056.d9bc5c7dceb3/nixexprs.tar.xz"

     

       669
       669
       +
               "url": "https://releases.nixos.org/nixos/25.11/nixos-25.11.1335.09eb77e94fa2/nixexprs.tar.xz"

     

       683
       670
        
             },

     

       684
       671
        
             "original": {

     

       685
       672
        
               "type": "tarball",

     
···

       724
       711
        
               "mystia": "mystia",

     

       725
       712
        
               "nix-index-database": "nix-index-database",

     

       726
       713
        
               "nixos-hardware": "nixos-hardware",

     

       727
       727
       -
               "nixpkgs": "nixpkgs_6",

     

       714
       714
       +
               "nixpkgs": "nixpkgs_5",

     

       728
       715
        
               "sops-nix": "sops-nix",

     

       729
       716
        
               "tangled-core": "tangled-core",

     

       730
       717
        
               "treefmt-nix": "treefmt-nix_3",

     
···

       759
       746
        
               ]

     

       760
       747
        
             },

     

       761
       748
        
             "locked": {

     

       762
       762
       -
               "lastModified": 1765079830,

     

       763
       763
       -
               "narHash": "sha256-i9GMbBLkeZ7MVvy7+aAuErXkBkdRylHofrAjtpUPKt8=",

     

       749
       749
       +
               "lastModified": 1765553226,

     

       750
       750
       +
               "narHash": "sha256-Ii16Nq5jL2wURXpV3D3tOM3vPpbKh18roHLkyZCHK4Q=",

     

       764
       751
        
               "owner": "Mic92",

     

       765
       752
        
               "repo": "sops-nix",

     

       766
       766
       -
               "rev": "aeb517262102f13683d7a191c7e496b34df8d24c",

     

       753
       753
       +
               "rev": "496a6f625f63b780ce849891868f2fad22fd49c6",

     

       767
       754
        
               "type": "github"

     

       768
       755
        
             },

     

       769
       756
        
             "original": {

     
···

       832
       819
        
               "sqlite-lib-src": "sqlite-lib-src"

     

       833
       820
        
             },

     

       834
       821
        
             "locked": {

     

       835
       835
       -
               "lastModified": 1765013052,

     

       836
       836
       -
               "narHash": "sha256-hPhegxFBoEHcKWoydEQGO5ew4CPJkSg8OCrvR+ZfSyg=",

     

       822
       822
       +
               "lastModified": 1765553661,

     

       823
       823
       +
               "narHash": "sha256-sj9NLGdgfXanu3wnqFg6BfWyFG1UsQ46O5UwQ2120is=",

     

       837
       824
        
               "ref": "refs/heads/master",

     

       838
       838
       -
               "rev": "442e2ab1b4dc3a8a75910abc564da55a639a495c",

     

       839
       839
       -
               "revCount": 1720,

     

       825
       825
       +
               "rev": "92ded47ecdfd0606aa15f78dde0014af18bcc06a",

     

       826
       826
       +
               "revCount": 1732,

     

       840
       827
        
               "type": "git",

     

       841
       828
        
               "url": "https://tangled.org/@tangled.sh/core"

     

       842
       829
        
             },

     
···

       942
       929
        
               ]

     

       943
       930
        
             },

     

       944
       931
        
             "locked": {

     

       945
       945
       -
               "lastModified": 1760401936,

     

       946
       946
       -
               "narHash": "sha256-/zj5GYO5PKhBWGzbHbqT+ehY8EghuABdQ2WGfCwZpCQ=",

     

       932
       932
       +
               "lastModified": 1763295135,

     

       933
       933
       +
               "narHash": "sha256-sGv/NHCmEnJivguGwB5w8LRmVqr1P72OjS+NzcJsssE=",

     

       947
       934
        
               "owner": "mitchellh",

     

       948
       935
        
               "repo": "zig-overlay",

     

       949
       949
       -
               "rev": "365085b6652259753b598d43b723858184980bbe",

     

       936
       936
       +
               "rev": "64f8b42cfc615b2cf99144adf2b7728c7847c72a",

     

       950
       937
        
               "type": "github"

     

       951
       938
        
             },

     

       952
       939
        
             "original": {

     
···

       957
       944
        
           },

     

       958
       945
        
           "zon2nix": {

     

       959
       946
        
             "inputs": {

     

       960
       960
       -
               "nixpkgs": "nixpkgs_3"

     

       947
       947
       +
               "nixpkgs": [

     

       948
       948
       +
                 "ghostty",

     

       949
       949
       +
                 "nixpkgs"

     

       950
       950
       +
               ]

     

       961
       951
        
             },

     

       962
       952
        
             "locked": {

     

       963
       953
        
               "lastModified": 1758405547,

global/gui/input.nix

···

       17
       17
        
             ];

     

       18
       18
        
           };

     

       19
       19
        
         };

     

       20
       20
       +
       

     

       21
       21
       +
         environment.systemPackages = [

     

       22
       22
       +
           pkgs.showmethekey

     

       23
       23
       +
         ];

     

       20
       24
        
       }

+1 -1

global/overlays/default.nix

···

       1
       1
       -
       _: []

     

       1
       1
       +
       _: [ ]

     

       2
       2
        
       # inputs: [

     

       3
       3
        
       #   # we can probably live without an overlay?

     

       4
       4
        
       #   # inputs.mystia.overlays.default

+1 -1

systems/koumakan/certificates/default.nix

···

       1
       1
        
       {

     

       2
       2
        
         imports = [

     

       3
       3
        
           ./global.nix

     

       4
       4
       -
           ./postgresql.nix

     

       4
       4
       +
           # ./postgresql.nix

     

       5
       5
        
           ./fediverse.nix

     

       6
       6
        
           ./bsky-pds.nix

     

       7
       7
        
           ./breezewiki.nix

systems/koumakan/certificates/postgresql.nix

···

       1
       1
       +
       # WARN: unused. see default.nix

     

       2
       2
       +
       

     

       1
       3
        
       { config, ... }:

     

       2
       4
        
       {

     

       3
       5
        
         # PostgreSQL only certificate

+16 -20

systems/koumakan/services/databases/postgresql.nix

···

       19
       19
        
             host    all             all             ::1/128                 scram-sha-256

     

       20
       20
        
           '';

     

       21
       21
        
       

     

       22
       22
       -
           settings =

     

       23
       23
       -
             let

     

       24
       24
       -
               credsDir = "/run/credentials/postgresql.service";

     

       25
       25
       -
             in

     

       26
       26
       -
             {

     

       27
       27
       -
               listen_addresses = pkgs.lib.mkForce "*";

     

       28
       28
       -
               max_connections = 200;

     

       29
       29
       -
               password_encryption = "scram-sha-256";

     

       22
       22
       +
           settings = {

     

       23
       23
       +
             listen_addresses = pkgs.lib.mkForce "*";

     

       24
       24
       +
             max_connections = 200;

     

       25
       25
       +
             password_encryption = "scram-sha-256";

     

       30
       26
        
       

     

       31
       31
       -
               log_line_prefix = "%m [%p] %h ";

     

       32
       32
       -
               ssl = "on";

     

       33
       33
       -
               ssl_cert_file = "${credsDir}/cert.pem";

     

       34
       34
       -
               ssl_key_file = "${credsDir}/key.pem";

     

       27
       27
       +
             log_line_prefix = "%m [%p] %h ";

     

       28
       28
       +
             # ssl = "on";

     

       29
       29
       +
             # ssl_cert_file = "${credsDir}/cert.pem";

     

       30
       30
       +
             # ssl_key_file = "${credsDir}/key.pem";

     

       35
       31
        
       

     

       36
       36
       -
               log_hostname = true;

     

       37
       37
       -
               datestyle = "iso, dmy";

     

       38
       38
       -
               log_timezone = "Asia/Hong_Kong";

     

       39
       39
       -
               timezone = "Asia/Hong_Kong";

     

       40
       40
       -
               default_text_search_config = "pg_catalog.english";

     

       32
       32
       +
             log_hostname = true;

     

       33
       33
       +
             datestyle = "iso, dmy";

     

       34
       34
       +
             log_timezone = "Asia/Hong_Kong";

     

       35
       35
       +
             timezone = "Asia/Hong_Kong";

     

       36
       36
       +
             default_text_search_config = "pg_catalog.english";

     

       41
       37
        
       

     

       42
       42
       -
               max_wal_size = "2GB";

     

       43
       43
       -
               min_wal_size = "80MB";

     

       44
       44
       -
             };

     

       38
       38
       +
             max_wal_size = "2GB";

     

       39
       39
       +
             min_wal_size = "80MB";

     

       40
       40
       +
           };

     

       45
       41
        
         };

     

       46
       42
        
       

     

       47
       43
        
         users.users.postgres.useDefaultShell = lib.mkForce false;

+3 -2

systems/koumakan/services/scm/forgejo.nix

···

       79
       79
        
               ENABLE_NOTIFY_MAIL = true;

     

       80
       80
        
               REGISTER_EMAIL_CONFIRM = true;

     

       81
       81
        
       

     

       82
       82
       -
               DISABLE_REGISTRATION = false;

     

       82
       82
       +
               DISABLE_REGISTRATION = false; # need to be false to enable any sort of reg.

     

       83
       83
       +
               ENABLE_INTERNAL_SIGNIN = true; # we have gatekeeper setup now and working, this can be turned off.

     

       83
       84
        
               ALLOW_ONLY_EXTERNAL_REGISTRATION = true;

     

       84
       85
        
       

     

       85
       86
        
               ENABLE_CAPTCHA = true;

     
···

       161
       162
        
             # Logging {{{

     

       162
       163
        
             log = {

     

       163
       164
        
               ROOT_PATH = "/var/log/forgejo/";

     

       164
       164
       -
               "logger.router.MODE" = "";

     

       165
       165
       +
               LOGGER_ROUTER_MODE = "";

     

       165
       166
        
             };

     

       166
       167
        
             # }}}

     

       167
       168

+18

systems/koumakan/services/security/pocket-id.nix

···

       35
       35
        
       

     

       36
       36
        
         services.nginx.virtualHosts."gatekeeper.soopy.moe" = _utils.mkSimpleProxy {

     

       37
       37
        
           port = 31411;

     

       38
       38
       +
       

     

       39
       39
       +
           extraConfig.locations."= /humans.txt" = _utils.mkNginxFile {

     

       40
       40
       +
             filename = "humans.txt";

     

       41
       41
       +
             content = ''

     

       42
       42
       +
               /* Credits */

     

       43
       43
       +
               Login Background: https://www.pixiv.net/artworks/122054405

     

       44
       44
       +
               You: for using our services

     

       45
       45
       +
       

     

       46
       46
       +
               /* People */

     

       47
       47
       +
               Administrator: soopyc

     

       48
       48
       +
               Contact: https://soopy.moe/about

     

       49
       49
       +
       

     

       50
       50
       +
               /* Service */

     

       51
       51
       +
               Software: Pocket ID

     

       52
       52
       +
               Deployed-With: NixOS

     

       53
       53
       +
               Security: https://soopy.moe/.well-known/security.txt

     

       54
       54
       +
             '';

     

       55
       55
       +
           };

     

       38
       56
        
         };

     

       39
       57
        
       }

systems/koumakan/services/storage/zipline.nix

···

       35
       35
        
             DATASOURCE_S3_REGION = "ap-east-1";

     

       36
       36
        
             DATASOURCE_S3_ENDPOINT = "https://s3.soopy.moe";

     

       37
       37
        
             DATASOURCE_S3_FORCE_PATH_STYLE = "true";

     

       38
       38
       +
       

     

       39
       39
       +
             FEATURES_OAUTH_REGISTRATION = "true";

     

       38
       40
        
           };

     

       39
       41
        
         };

     

       40
       42

+1 -1

systems/renko/configuration.nix

···

       43
       43
        
         ];

     

       44
       44
        
       

     

       45
       45
        
         networking.firewall = {

     

       46
       46
       -
           allowedTCPPorts = [ 59153 ];

     

       46
       46
       +
           allowedTCPPorts = [ 59153 5515 ];

     

       47
       47
        
           allowedTCPPortRanges = [

     

       48
       48
        
             {

     

       49
       49
        
               from = 25560;

+4 -2

users/cassie/default.nix

···

       1
       1
       -
       { ... }:

     

       2
       1
        
       {

     

       3
       2
        
         users.users.cassie = {

     

       4
       3
        
           isNormalUser = true;

     

       5
       5
       -
           extraGroups = [ "wheel" ];

     

       4
       4
       +
           extraGroups = [

     

       5
       5
       +
             "wheel"

     

       6
       6
       +
             "dialout" # esp programming

     

       7
       7
       +
           ];

     

       6
       8
        
           openssh = {

     

       7
       9
        
             authorizedKeys.keyFiles = [ ../../creds/ssh/users/cassie ];

     

       8
       10
        
           };

+1 -1

users/cassie/home/dev/ssh.nix

···

       39
       39
        
           ## n.b.: identitesonly and identityfile makes bootstrapping other devices hard esp.

     

       40
       40
        
           ##       if they're embedded or resource constrained.

     

       41
       41
        
           extraConfig = ''

     

       42
       42
       -
             VisualHostKey = true; # if this doesn't work im moving to hjem

     

       42
       42
       +
             VisualHostKey yes

     

       43
       43
        
           '';

     

       44
       44
        
         };

     

       45
       45
        
       }

Compare changes